83 matches found
CVE-2013-4551
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for 1 VMLAUNCH and 2 VMRESUME, which allows local HVM guest users to cause a denial of service host crash via unspecified vectors related to "guest VMX instruction execution."...
CVE-2013-4551
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for 1 VMLAUNCH and 2 VMRESUME, which allows local HVM guest users to cause a denial of service host crash via unspecified vectors related to "guest VMX instruction execution."...
CVE-2013-4551
Xen 4.2.x and 4.3.x are affected by CVE-2013-4551. When nested virtualization is disabled, Xen fails to properly validate emulation paths for VMLAUNCH and VMRESUME, enabling a local HVM guest to trigger a host denial-of-service (host crash) via unspecified vectors related to guest VMX instruction...
CVE-2012-4551
The CVE-2012-4551 issue affects libunity-webapps before 2.4.1 and is a use-after-free vulnerability. According to multiple connected sources, it could be triggered by crafting a website to cause memory corruption, potentially leading to a denial of service and possibly arbitrary code execution. U...
[USN-1635-1] libunity-webapps vulnerability
========================================================================== Ubuntu Security Notice USN-1635-1 November 21, 2012 libunity-webapps vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...
CVE-2011-4551
CVE-2011-4551 affects TikiWiki CMS/Groupware via tiki-cookie-jar.php, enabling stored XSS that allows injection of arbitrary scripts/HTML through arbitrary parameters. Impact described as remote XSS in all current releases up to 8.2 and 6.5 LTS. Affected component is the tiki-cookie-jar.php handl...
Tiki Wiki CMS Groupware Stored Cross-Site-Scripting
Advisory: Tiki Wiki CMS Groupware Stored Cross-Site-Scripting Advisory ID: INFOSERVE-ADV2011-07 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 8.1 & 6.4 LTS affects all current releases Vendor URL: http://info.tiki.org/ Vendor Status: fixed...
Tiki Wiki CMS Groupware 8.1 / 6.4 LTS Cross Site Scripting
Advisory: Tiki Wiki CMS Groupware Stored Cross-Site-Scripting Advisory ID: INFOSERVE-ADV2011-07 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 8.1 & 6.4 LTS affects all current releases Vendor URL: http://info.tiki.org/ Vendor Status: fixed...
CVE-2011-4551
creationtimestamp| type| source ---|---|--- 2011-12-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36470...
CVE-2010-4551
IBM Lotus Notes Traveler prior to 8.5.1.2 is affected: vulnerability arises when the Internet ID field in a person document is omitted, enabling remote authenticated users to trigger a NULL pointer dereference that crashes the Traveler daemon via Apple-device invitation acceptance/decline. Affect...
CVE-2009-4551
SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter in a results action to index.php. Affected software: Miniweb 2.0, Survey Pro module. Impact as per NVD: base score 7.5 (HIGH). Exploitation ...
SuSE 10 Security Update : strongswan (ZYPP Patch Number 5693)
This update of strongswan fixes a denial of service problem that occurs while parsing a IKESAINIT message dursing key exchange. This allows an remote attacker to crash the daemon. CVE-2008-4551 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell,...
CVE-2009-4551
creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9339...
openSUSE Security Update : strongswan (strongswan-255)
This update of strongswan fixes a denial of service problem that occurs while parsing a IKESAINIT message dursing key exchange. This allows an remote attacker to crash the daemon. CVE-2008-4551 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2008-4551
strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...
CVE-2008-4551
Concrete details: CVE-2008-4551 affects strongSwan 4.2.6 and earlier. The vulnerability is a denial of service (daemon crash) triggered by an IKE_SA_INIT message containing a large number of NULL values in a Key Exchange payload, which causes a NULL pointer dereference in GMP’s mpz_export return ...
CVE-2007-4551
CVE-2007-4551 is a PHP remote file inclusion vulnerability affecting Agares Media Arcadem 2.01. The issue occurs in index.php where the loadpage parameter can be used to include arbitrary PHP code, enabling remote code execution. The provided documents do not specify a fixed vulnerable version be...
CVE-2006-4551
The CVE-2006-4551 entry describes an eval injection vulnerability in Feedsplitter (the feedsplitter.php handling path) that allows remote attackers to execute arbitrary PHP code by supplying the file to the value of the format parameter, and possibly via a malicious RSS feed. The root cause is im...
CVE-2005-4551
The CVE-2005-4551 issue affects the web app codegrrl SimpBook 1.0 . The vulnerability is a Cross-site Scripting (XSS) flaw in sign.php when the configuration flag html_enable is enabled. An attacker can supply arbitrary HTML/script via the message parameter to index.php, which could be reflected ...
